CVE-2016-9719: Input Validation

Published Jul 31, 2017

Updated

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 119733.

Affected Software

6 affected components

IBM InfoSphere Master Data Management Server=10.1

IBM InfoSphere Master Data Management Server=11.0

IBM InfoSphere Master Data Management Server=11.3

IBM InfoSphere Master Data Management Server=11.4

IBM InfoSphere Master Data Management Server=11.5

IBM InfoSphere Master Data Management Server=11.6

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22006607

Event History

Jul 31, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9719?

CVE-2016-9719 is considered a medium severity vulnerability that could allow clickjacking attacks.

How do I fix CVE-2016-9719?

To fix CVE-2016-9719, apply the latest security patches provided by IBM for affected versions of InfoSphere Master Data Management Server.

What versions of IBM InfoSphere Master Data Management Server are affected by CVE-2016-9719?

CVE-2016-9719 affects versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 of IBM InfoSphere Master Data Management Server.

What type of attack is enabled by CVE-2016-9719?

CVE-2016-9719 enables remote attackers to conduct clickjacking attacks by persuading users to visit a malicious website.

Is there a workaround for CVE-2016-9719?

While no official workaround is provided, implementing security measures such as using clickjacking protection headers can mitigate the risk.